Brian Mendonca 3f5e7f8156 fix(gateway): consume allow-once approvals to prevent replay ...

(cherry picked from commit 6adacd447c61b7b743d49e8fabab37fb0b2694c5)

2026-02-24 04:20:30 +00:00

..

acp

fix(acp): harden permission tool-name validation

2026-02-24 01:11:34 +00:00

agents

test(subagents): mock sessions store in steer-restart coverage

2026-02-24 04:17:56 +00:00

auto-reply

fix(auto-reply): expand standalone stop phrases

2026-02-24 04:02:43 +00:00

browser

test: add env -S allowlist bypass regressions

2026-02-24 02:28:00 +00:00

canvas-host

…

channels

fix: harden legacy plugin schema compatibility tests (#24933) (thanks @pandego)

2026-02-24 03:50:53 +00:00

cli

fix(gateway): bind node exec approvals to nodeId

2026-02-24 03:05:58 +00:00

commands

chore(status): clarify bootstrap file semantics

2026-02-24 04:17:56 +00:00

compat

…

config

fix(config): align whatsapp enabled schema with auto-enable

2026-02-24 03:39:41 +00:00

cron

…

daemon

fix: back up existing systemd unit before overwriting on update (#24350) (#24937)

2026-02-24 03:22:55 +00:00

discord

test(discord): stabilize parent-info + doctor migration assertions (#25028)

2026-02-24 04:10:52 +00:00

docs

…

gateway

fix(gateway): consume allow-once approvals to prevent replay

2026-02-24 04:20:30 +00:00

hooks

fix(agents): include SOUL.md, IDENTITY.md, USER.md in subagent/cron bootstrap allowlist

2026-02-24 04:04:35 +00:00

imessage

…

infra

fix(infra): handle Windows dev=0 in sameFileIdentity TOCTOU check (#24939)

2026-02-24 03:33:27 +00:00

line

…

link-understanding

…

logging

…

markdown

…

media

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

media-understanding

…

memory

…

node-host

fix(security): trust resolved skill-bin paths in allowlist auto-allow

2026-02-24 03:12:43 +00:00

pairing

…

plugin-sdk

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

plugins

fix: replace stale plugin webhook routes on re-registration

2026-02-24 04:01:41 +00:00

process

…

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

routing

…

scripts

…

security

fix(sandbox): harden fs bridge path checks and bind mount policy

2026-02-24 02:21:43 +00:00

sessions

…

shared

fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky)

2026-02-24 03:28:00 +00:00

signal

…

slack

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

telegram

test(telegram): align stop-phrase sequential key expectation (#25034)

2026-02-24 04:16:17 +00:00

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

…

types

…

utils

…

web

fix: add dmScope route guard regression tests (#24949) (thanks @kevinWangSheng)

2026-02-24 03:55:29 +00:00

whatsapp

…

wizard

…

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

…

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…